Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web… (CVE-2026-87517)
Source GCVE Database
Not known to be exploited.
Data as of 10/25/2026, 04:40:14 UTC
CVSS not yet scored by NVD
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 8% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
Mavencom.google.chrome/mobilepkg:maven/com.google.chrome/mobileOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users and administrators should monitor official Google Chrome security advisories for updates and apply the patch once it becomes available. Until then, exercising caution with untrusted web content and social engineering attempts is advised.
Description
A race condition vulnerability exists in Google Chrome Mobile on iOS versions prior to 153.0.8010.36. This flaw allows a remote attacker, using social engineering and a crafted HTML page, to bypass the web origin policy. The vulnerability is classified as high severity by Chromium security. No CVSS score or patch information is currently provided.
Impact
Successful exploitation could allow an attacker to bypass the web origin policy, potentially leading to unauthorized access to web resources or data that should be isolated by origin boundaries. This could facilitate cross-origin attacks or data leakage in the affected browser environment. However, no known exploits in the wild have been reported.
Weaknesses
- CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition (opens in a new tab)
Base weaknessLikelihood of exploit: Medium
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.